HTTP Header Builder & Security Auditor

Build the raw text of an HTTP/1.1 request from a method, path, host and header list, then copy it into curl, netcat or a debugging proxy. Switch to the audit tab to paste real response headers and check HSTS, CSP, frame protection, content-type sniffing, referrer policy and permissions policy, with an explanation for every finding.